Denial of service vulnerability in mod_RSsim (CNVD-2020-48912)

modRSsim is a simulation simulation software. A denial of service vulnerability exists in modRSsim, which can be exploited by attackers to cause a denial of service...

Binary Vulnerability in Siemens PLC at Siemens (China) Co.

Siemens is a global technology company that provides solutions for customers in the areas of power generation and transmission and distribution, infrastructure, industrial automation, drives and software with innovations in electrification, automation and digitalization. A binary vulnerability...

5vshop e-commerce system has a logic flaw vulnerability

5vshop e-commerce system is shijiazhuang zhenghong network technology limited company a station building system. 5vshop e-commerce system has a logic flaw vulnerability, attackers can use this vulnerability to arbitrarily modify the payment amount, resulting in economic losses...

Chinese Hackers Escalate Attacks Against India and Hong Kong Amid Tensions

An emerging threat actor out of China has been traced to a new hacking campaign aimed at government agencies in India and residents of Hong Kong intending to steal sensitive information, cybersecurity firm Malwarebytes revealed in the latest report shared with The Hacker News. The attacks were...

ASUS ScreenPad2 Upgrade Tool Code Issue Vulnerability

ASUS ScreenPad2 Upgrade Tool is an update tool for the ASUS ScreenPad2 touchpad from ASUS of Taiwan, China.ASUS ScreenPad2 Upgrade Tool version 1.0.3 contains the AsusScreenXpertServicec.exe and ScreenXpertUpgradeServiceManager.exe files are vulnerable to a code issue. An attacker could exploit t...

Null Pointer Reference Vulnerability in CAJViewer

CAJviewer is a specialized full-text format reader for China Journal Network CJN, which supports TEB, NH, CAJ, KDH and PDF files of CJN. CAJViewer suffers from a null pointer reference vulnerability that can be exploited by an attacker to cause a denial of service...

Stack Overflow Vulnerability in CAJViewer

CAJviewer is a specialized full-text format reader for China Journal Network CJN, which supports TEB, NH, CAJ, KDH and PDF files of CJN. CAJViewer suffers from a stack overflow vulnerability that can be exploited by an attacker to cause a denial of service...

Logic flaws and vulnerabilities in Air China APP order logistics information query

Air China App is a mobile software for national aviation service. A logic flaw vulnerability exists at the Air China APP order logistics information query. An attacker can use the vulnerability to view the logistics information of any order, including sensitive information such as the user's...

Google Chrome Code Issue Vulnerability

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. Google Chrome versions prior to 84.0.4147.89 have a code issue vulnerability, no detailed vulnerability details are available at this time...

Friday Squid Blogging: China Closing Its Squid Spawning Grounds

China is prohibiting squid fishing in two areas -- both in international waters -- for two seasons, to give squid time to recover and reproduce. This is the first time China has voluntarily imposed a closed season on the high seas. Some experts regard it as an important step forward in China's...

ibmchina.com Cross Site Scripting vulnerability OBB-1220623

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Hong Kong's Security Law Puts Big Tech at a Crossroads

As China exerts more power over the city, companies like Facebook and Google have stopped handing over data—for now...

CmsEasyQA bounty Q&A system there are arbitrary file reading vulnerabilities in Siping City, China.

CmsEasyQA Reward Q&A System is a php Q&A system developed in PHP+MySQL. Siping City, Jiuzhou Yi Tong Technology Co., Ltd CmsEasyQA reward Q&A system has an arbitrary file reading vulnerability, an attacker can use the vulnerability to read arbitrary files...

Samsung Mobile Device Path Traversal Vulnerability (CNVD-2020-38180)

Android is a free and open source operating system from Google based on the Linux kernel without GNU components. A path traversal vulnerability exists in Samsung mobile devices, which can be exploited by an attacker to access system files...

Xen competitive conditions loophole

Xen is an open source virtual machine monitor product from the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. A security vulnerability exists in Xen 4.13....

The Worst Hacks and Breaches of 2020 So Far

Iran, China, Russia—the gang was all here in the first half of this year. Oh, and also an unprecedented pandemic that’s been a boon for hackers...

FakeSpy Android Malware Spread Via ‘Postal-Service’ Apps

Android mobile device users are being targeted in a new SMS phishing campaign that’s spreading the FakeSpy infostealer. The malware, which is disguised as legitimate global postal-service apps, steals SMS messages, financial data and more from the victims’ devices. The campaign was first discover...

China’s insidious surveillance against Uyghurs with Android malware

By Sudais Asif China for long has been persecuting Uyghurs Muslims on the pretext of countering extremist ideologies... This is a post from HackRead.com Read the original post: China's insidious surveillance against Uyghurs with Android malware...

Advantech WebAccessNode Denial of Service Vulnerability in Advantech (China) Co.

Advantech WebAccessNode is a fully Internet Explorer based HMI/SCADA monitoring software. A denial of service vulnerability exists in Advantech WebAccessNode, which can be exploited by attackers to cause a denial of service on the system...

Denial of Service Vulnerability in WR740N of China P&L Technology Limited (CNVD-2020-45178)

China P&T is a leading global provider of network communication equipment. A denial-of-service vulnerability exists in the WR740N of China P&L Technology Limited, which can be exploited by an attacker to cause a denial of service...